NeoGate TG Series User Manual

NeoGate TG Series User Manual Version 1.2 Date: March 12th,2015 Yeastar Information Technology Co. Ltd

Table of Contents 1. Introduction...4 1.1 FEATURES... 4 1.2 HARDWARE SPECIFICATION... 5 2. System setup...7 2.1 SIM CARD PLACEMENT... 7 2.2 ANTENNA CONNECTION... 7 2.3 ETHERNET LINE CONNECTION... 8 2.4 POWER SUPPLY CONNECTION... 8 3 Administrator Login...8 4. Status...9 4.1 SYSTEM STATUS... 10 4.1.1 Trunk status... 10 4.1.2 Network status... 11 4.1.3 System info... 11 4.2 REPORTS... 12 4.2.1 Call logs... 12 4.2.2 System logs... 12 5. System... 13 5.1 NETWORK PREFERENCES... 13 5.1.1 LAN Settings... 13 5.1.2 VLAN Settings... 14 5.1.3 VPN Settings... 15 5.1.3 DDNS Settings... 15 5.1.4 Static Route... 16 5.2 SECURITY CENTER... 17 5.2.1 Security Center... 17 5.2.2 Alert settings... 18 5.2.3 Certificates... 21 5.2.4 Firewall Rules... 22 5.2.5 IP Blacklist... 23 5.3 SYSTEM PREFERENCES... 24 5.3.1 Password settings... 24 5.3.2 Date and Time... 25 5.3.3 Custom Prompts... 25 5.3.4 Email settings... 26 5.3.5 Firmware Update... 27 5.3.6 Backup and Restore... 28 5.3.7 Reset and Reboot... 29 6 SMS... 30 2/62

6.1 SEND SMS... 30 6.2 SMS CONTACTS... 30 6.3 OUTBOX... 31 6.4 INBOX... 31 6.5 USSD... 32 6.6 API SETTINGS... 32 7 Gateway... 34 7.1 MOBILE LIST... 34 7.1.1 Mobile List... 34 7.1.2 Module Group... 37 7.1.3 Call Waiting... 38 7.1.4 Follow me... 39 7.2 VOIP SETTINGS... 40 7.2.1 VoIP trunk... 40 7.2.2 Trunk Group... 46 7.2.3 SIP Settings... 46 7.2.4 IAX Settings... 52 7.2.5 General Preferences... 52 7.3 ROUTES SETTINGS... 53 7.3.1 Mobile to IP... 53 7.3.2 IP to Mobile... 56 7.3.3 Blacklist... 58 7.3.4 Callback Settings... 58 8 Applications... 61 3/62

1. Introduction NeoGate TG Gateway for Maximum Efficiency & Cost Savings NeoGate is a device for connecting Mobile Network to VoIP Network directly, which can support two-way communication: Mobile to VoIP or VoIP to Mobile. It is the best solution ever to connect IP-based telephone systems, soft switches, and IP-PBXs to Mobile network. NeoGate TG Gateway supports GSM, UMTS and CDMA network (TG1600 does not support UMTS now). 1.1 Features SIP proxy Registrar for IP phones included Incoming call routing Outgoing call routing SMS sending and receiving (WEB interface) USSD API Call Back LCR (Least Cost Routing) Top voice quality (EFR super sound) Simple Web based configuration Easy to integrate Easy to install For more information, please click: http://www.yeastar.com/products/products.asp 4/62

1.2 Hardware Specification Model Channels Appearance NeoGate TG100 1 NeoGate TG200 2 5/62

NeoGate TG400 4 NeoGate TG800 8 NeoGate TG1600 16 6/62

2. System Setup 2.1 SIM Card Placement Insert the SIM card on the front panel directly before powering on NeoGate. To remove this card, press the button on the left side, the card will pop directly. If you are using NeoGate TG100, you should open the box before installing SIM card on the board directly. Notes: 1. The SIM card should be mini-sim (2FF). 2. Please cut off the power before installing SIM card. You can also log in Web interface to power this module off separately. 2.2 Antenna Connection NeoGate is equipped with antenna connector for all the GSM/UTMTS/CDMA modules. The external antenna should be installed vertically always on a site with a good wireless signal. 7/62

2.3 Ethernet Line Connection NeoGate provides two 10/100M Ethernet ports with RJ45 interface and LED indicator. Plug Ethernet line into NeoGate s Ethernet port, and then connect the other end of the Ethernet line with a hub, switch, router, LAN or WAN. Once connected, check the status of the LED indicator. A yellow LED indicates the port is in 100M mode, if it s dark, the speed is 10M. Green LED indicates the port is properly connected, if it s flickering, it means data transmission. 2.4 Power Supply Connection NeoGate utilizes the high-performance switch power, which supplies enough voltage and electrical energy required by NeoGate system. AC Input: 100~240V DC Output: 12V, 1A Please follow the steps below to connect the NeoGate unit to a power outlet: 1. Connect the small end of the power cable to the power input port on the NeoGate back panel, and plug the other end of the cable into a 100VAC power outlet. 2. Check the Power LED on the front panel. A solid green LED indicates that power is being supplied correctly. 3 Administrator Login Open your Web browser and input the IP address of the NeoGate server. If this is the first time you configure NeoGate, please use the default settings below: IP Address: http://192.168.5.150 Username: admin Password: password In this example, the IP address is 192.168.2.135, the model is TG800. 8/62

Click Login to get the welcome page. Figure 3-1 Figure 3-2 4. Status Click and the detailed reports. to check the status of NeoGate TG, including the system status 9/62

4.1 System Status In this page, we can check the status of the system, including trunk status, network status and system information. 4.1.1 Trunk status Figure 4-1 NeoGate Status : GSM/UTMTS/CDMA Tunk: Status Idle Busy Failed The port is idle The port is in use The port has not inserted the SIM Card Signal VoIP Trunk: Status Unregistered Registered No signal Poor Average Good Excellent Trunk registration failed Successful registration, trunk is ready for use 10/62

Request Sent Waiting Registering Waiting for authentication Service Provider: Status OK Unreachable Failed Successful registration, trunk is ready for use The trunk is unreachable. Trunk registration failed. 4.1.2 Network status In this page, the IP address of LAN port will appear with their status. Figure 4-2 If you VLAN or OpenVPN are configured, you can check the status in this page also. 4.1.3 System info In this page, we can check the hardware/firmware version, or the disk usage of NeoGate TG. Figure 4-3 11/62

4.2 Reports In this page, we can check the call detailed log and system log, which is used to debug. 4.2.1 Call logs The call log captures all call details, including call time, caller number, callee number, call type, call duration, etc. An administrator can search and filter call data by call date, caller/callee, trunk, duration, billing duration, status, or communication type. Figure 4-4 4.2.2 System logs You can download and delete the system logs of NeoGate TG. Figure 4-5 12/62

5. System Click to access. In this page, we can configure the network settings, firewall rules and some system preferences. 5.1 Network Preferences 5.1.1 LAN Settings Figure 5-1 Items DHCP Enable SSH Port Hostname IP Address Subnet Mask Gateway Primary DNS Secondary DNS If this option is set as yes, NeoGate TG will act as DHCP client to get an available IP address from your local network. We don t recommend enabling this, as without the right IP address you cannot access NeoGate TG. This is the advanced way to access the device. You can use the software putty to access the device. In the SSH access, you can do more advanced setting and debug. It s disabled by default. We don t recommend enabling it if not needed. The default is 8022; you can change it to another one. Set the host name for NeoGate TG Set the IP Address for NeoGate TG, It is recommended to configure a static IP address for NeoGate TG Set the subnet mask for NeoGate TG Set the gateway for NeoGate TG Set the primary DNS for NeoGate TG. Set the secondary DNS for NeoGate TG 13/62

IP Address2 Subnet Mask2 Set the second IP Address for NeoGate TG Set the second subnet mask for NeoGate TG 5.1.2 VLAN Settings A VLAN (Virtual LAN) is a logical local area network (or LAN) that extends beyond a single traditional LAN to a group of LAN segments, given specific configurations. Note: NeoGate TG is not the VLAN server, a 3-layer switch is still needed, please configure the VLAN information there first, then input the details in NeoGate TG, so that the packages via NeoGate TG will be added the VLAN label before sending to that switch. Figure 5-2 Items NO.1 VLAN Number VLAN IP Address VLAN Subnet Mask Default Gateway NO.2 VLAN Number VLAN IP Address VLAN Subnet Mask Default Gateway Click the NO.1 you can edit the first VLAN over LAN The VLAN Number is a unique value you assign to each VLAN on a single device Set the IP Address for NeoGate TG VLAN over LAN. Set the Subnet Mask for NeoGate TG VLAN over LAN. Set the Default Gateway for NeoGate TG VLAN over LAN Click the NO.2 you can edit the first VLAN over LAN..The VLAN Number is a unique value you assign to each VLAN on a single device. Set the IP Address for NeoGate TG VLAN over LAN. Set the Subnet Mask for NeoGate TG VLAN over LAN. Set the Default Gateway for NeoGate TG VLAN over LAN. 14/62

5.1.3 VPN Settings A virtual private network (VPN) is a method of computer networking--typically using the public internet--that allows users to privately share information between remote locations, or between a remote location and a business' home network. A VPN can provide secure information transport by authenticating users, and encrypting data to prevent unauthorized persons from reading the information transmitted. The VPN can be used to send any kind of network traffic securely. NeoGate TG supports OpenVPN. Figure 5-3 Enable VPN Import VPN Config Import configuration file of OpenVPN. Notes: 1. Don't configure user and group in the config file. You can get the config package from the OpenVPN provider. 2. NeoGate TG works as VPN client mode only. 5.1.3 DDNS Settings DDNS(Dynamic DNS) is a method / protocol / network service that provides the capability for a networked device, such as a router or computer system using the Internet Protocol Suite, to notify a Domain Name System (DNS) name server to change, in real time, the active DNS configuration of its configured hostnames, addresses or other information. 15/62

Figure 5-4 Enable DDNS Items DDNS Server User Name Password Host Name Select the DDNS server you sign up for service. User name the DDNS server provides you. User account s password. The host name you have got from the DDNS server Note: DDNS allows you to access your network using domain names instead of IP address. The service manages changing IP address and updates your domain information dynamically. You must sign up for service through dyndns.org, freedns.afraid.org, www.no-ip.com, www.zoneedit.com 5.1.4 Static Route NeoGate TG will have more than one internet connection in some situations but it has only one default gateway. You will need to set some Static Route for NeoGate TG to force it to go out through different gateway when access to different internet. The default gateway priority of NeoGate TG from high to low is VPN/VLAN LAN port. 16/62

Figure 5-5 1) Route Table The current route rules of NeoGate TG. 2) Static Route Rules You can add new static route rules here. Items Destination The destination network to be accessed to by NeoGate TG. Subnet Mask Specify the destination network portion. Define which gateway NeoGate TG will go through when Gateway access to the destination network. The cost of a route is calculated by using what are called routing metric. Routing metrics are assigned to routes by Metric routing protocols to provide measurable statistic which can be used to judge how useful (how low cost) a route is. Interface Define which internet port to go through. 5.2 Security Center 5.2.1 Security Center You can check NeoGate TG security configuration in Security Center page. And also, you can enter the relevant security settings page rapidly. Firewall: Figure 5-6 In the Firewall tab, you can check firewall configuration and alert settings. By 17/62

clicking the relevant button, you can enter the configuration page directly. Service: Figure 5-7 In Service tab, you can check SMS/USSD API /SSH/TFTP status. For SMS/USSD API, you can enter the according page by clicking the button in Setting column. For TFTP, you can directly disable or enable it. Port: Figure 5-8 In Port tab, you can check SIP port and HTTP port. You can also enter the relevant page by clicking the button in Setting column. We recommend changing the default port for security. 5.2.2 Alert settings If the device is under attack, the system will alert users via call or E-mail. The attack modes include IP attack and Web Login. Figure 5-9 1. IPATTACK When the system is attacked by IP address, the firewall will add the IP to auto IP Blacklist and notify the user if it match the protection rule. 1) Phone Notification Settings 18/62

Items PHONE Notification Number Port Attempts Interval Prompt Whether enable phone notification The numbers could be set for alert notification, users can setup multiple extension and outbound phone numbers. Please separate them by ;. Example: 500;9911, if the extension has configured Follow Me Settings, the call would go to the forwarded number directly. Choose the GSM/UTMTS/CDMA port to dial alert call. The attempts to dial a phone number when there is no answer. The interval between each attempt to dial the phone number. Must be longer than 3 seconds, the default value is 60 seconds. Users will hear the prompt while receiving the phone notification. 2) E-mail Notification Settings Note: Please ensure that all voicemail settings are properly configured on the System Settings -> Voicemail Settings page before using this feature. Items E-mail Notification Recipient s Name Subject Whether enable E-mail Notification The recipients for the alert notification, and multiple email addresses are allowed, please separate them by ;. Example: jerry@yeastar.com;jason@yeastar.com, 456@sina.com The subject of the alert email. Text content support for predefined variables. Variable names and corresponding instructions are as follows: Email Content gateway hostname:$(hostname) attack source ip address:$(sourceip) attack dest mac:$(destmac) attack source port:$(destport) attack source protocol:$(protocol) attack occurred:$(datetime) 19/62

Figure 5-10 2. WEBLOGIN Web Login Alert Notification: Enter the password incorrectly five times to login NeoGate TG Web interface will be as attack, the system will limit the IP login within 10 minutes and notify the user. 20/62

Figure 5-11 5.2.3 Certificates NeoGate TG can support TLS trunk. Before you register TLS trunk to NeoGate TG, you should upload certificates first. Figure 5-12 Trusted Certificate This certificate is a CA certificate. When selecting TLS Verify Client as Yes, you should upload a CA. The relevant IPPBX should also have this certificate. Gateway Certificate 21/62

This certificate is server certificate. No matter selecting TLS Verify Client as Yes or NO, you should upload this certificate to NeoGate TG. If IPPBX enables TLS Verify server, you should also upload this certificate on IPPBX. 5.2.4 Firewall Rules Figure 5-13 1) General Settings Items Enable Firewall Disable Ping Drop All Enable the firewall to protect the device. You should reboot the device to make the firewall run successfully. Enable this item to drop net ping from remote hosts. When you enable Drop All feature, system will drop all packets or connection from other hosts if there are no other rules defined. To avoid locking the devices, at least one TCP accept common rule must be created for port used for SSH access, port used for HTTP access and port sued for CGI access. 2) Common Rules There is no default rule; you can create one as required. 22/62

Items Name Protocol Port IP MAC Address Action Figure 5-14 A name for this rule, e.g. HTTP. Simple description for this rule. E.g.: Accept the specific host to access the web interface for configuration. The protocols for this rule. Initial port should be on the left and end port should be on the right. The end port must be equal to or greater than start port. The IP address for this rule. The format of IP address is: IP/mask Ex: 192.168.5.100/255.255.255.255 for IP 192.168.5.100 Ex:192.168.5.0/255.255.255.0 for IP from 192.168.5.0 to 192.168.5.255. The format of MAC Address is XX:XX:XX:XX:XX:XX, X means 0~9 or A~F in hex, the A~F are not case sensitive. Accept: Accept the access from remote hosts. Drop: Drop the access from remote hosts. Ignore: Ignore the access. Note: The MAC address will be changed when it s a remote device, so it will not be working to filter using MAC for remote devices. 5.2.5 IP Blacklist You can set some packets accept speed rules here. When a IP address which hasn t been accepted in common rules sends packets faster than the allowed speed, it will be set as black IP address and blocked automatically. 23/62

1) Blacklist rules Figure 5-15 We can add the rules for IP blacklist rate as demanded. Items Port Protocol IP Packets Time interval Figure 5-16 Auto defense port Auto defense protocol. TCP or UDP. Allowed IP packets number in the specific time interval. The time interval to receive IP packets. For example, IP packets 90, time interval 60 means 90 IP packets are allowed in 60 seconds. 2) IP blacklist The blocked IP address will display here, you can edit or delete it as your wish. 5.3 System Preferences In this page, we can set other system preferences, like the password for admin account, system date and time, firmware update, backup and restore, reset and reboot. 5.3.1 Password settings The default password is password. To change the password, enter the new password and click update. The system will then prompt you re-login using your 24/62

new password. Figure 5-17 5.3.2 Date and Time Set the date and time for NeoGate TG. Figure 5-18 Items Time Zone Daylight Saving Time Automatically Synchronize With an Internet Time Server Set Date & Time Manually You can choose your time zone here. Set the mode to Automatic or disabled Input the NTP server so that NeoGate TG will update the time automatically You can set the time to your local right time manually here 5.3.3 Custom Prompts We can upload the prompts in this page; you can also download it and save it as a backup. 25/62

Figure 5-19 The administrator can upload prompts by doing the following: 1) Click Upload Prompt. 2) Click Browse to choose the desired prompt. 3) Click Upload to upload the selected prompt. Figure 5-20 Note: The file size must not be larger than 1.8 MB, and the file must be WAV format: GSM 6.10 8 khz, Mono, 1 Kb/s; Alaw/Ulaw 8 khz, Mono, 1 Kb/s; PCM 8 khz, Mono, 16 Kb/s. 5.3.4 Email settings To send the SMS or system alert to email address, please configure the Email settings first, and make sure SMTP test is successful. 26/62

Figure 5-21 Items The E-mail Address that NeoGate TG will use to E-mail Address send voicemail. Password The password for the email address used above The IP address or hostname of an SMTP server that the NeoGate TG will connect to in order to send SMTP Server voicemail messages via email, i.e. mail.yourcompany.com. Port SMTP Port: the default value is 25. If the server of sending email needs to Use SSL/TLS to send authenticate the sender, you need to enable this secure message to server Note: Must be selected for Gmail or exchange server. After filling out the above information, you can click on the Test Account Settings button to check whether the setup is OK. 1) If the test is successful, you can use the email safely. 2) If test failed, please check if the above information is correct or network is proper. 5.3.5 Firmware Update Upgrading of the firmware is possible through the Administrator Web interface using a TFTP Server or an HTTP URL. Enter your TFTP Server IP address and firmware file location, then click start to update the firmware 27/62

Notes: 1. If enabled Reset configuration to Factory Defaults, System will restore to factory default settings. 2. When update the firmware, please don t turn off the power. Or the system will get damaged. Figure 5-22 5.3.6 Backup and Restore We can backup up the configurations before reset NeoGate TG to factory defaults, and then restore it using this package. Figure 5-23 Notes: 1. Only configurations, custom prompts will be backed up. 2. When you have updated the firmware version, it s not recommended to restore using old package. 28/62

5.3.7 Reset and Reboot We can reset or reboot NeoGate TG directly in this page. Figure 5-24 Reboot System Warning: Rebooting the system will terminate all active calls! Reset to Factory Defaults Warning: A factory reset will erase all configuration data on the system. Please do not turn off the system until the RUN light begins blinking. Any power interruption during this time could cause damage to the system. 29/62

6 SMS Click to access the SMS page, it has the powerful SMS toolkit like send/receive SMS, USSD, and SMS API. We can also check the status of SMS that we sent. 6.1 Send SMS In this page, we can send the SMS directly via GSM/UTMTS/CDMA port directly. Figure 6-1 Items Country code Destination Select Port Content Choose the country code of yours, if you cannot find the code for you, just ignore it and add the code before number in destiation field to send SMS. Input the destination number to send the SMS to, you can also choose the contact directly by name or Group. Choose the channel to send the SMS Input the content of SMS, the max characters can reach 300. If the length you send is longer than 160, the SMS will be cut into 2 pieces at provider side. 6.2 SMS Contacts We can add the contact in NeoGate TG to send the SMS, then we can choose the contact by name or Group before sending SMS. 30/62

Figure 6-2 To custimize the Group name, just choose Customized, then input the group name, the special characters like blank is not allowed. You can input _ instead. 6.3 Outbox To check the SMS we sent, we can check it in outbox page, there are some filters for searching the SMS we want. We can also check the status of email below. Figure 6-3 6.4 Inbox NeoGate TG can check the incoming SMS also in this page; we can search SMS via filters like date, port and read status etc. We can also reply this SMS directly in this page via the same port. 31/62

Figure 6-4 6.5 USSD Unstructured Supplementary Service Data (USSD) is a protocol used by GSM/UTMTS/CDMA cellular telephones to communicate with the service provider's computers. USSD can be used for WAP browsing, prepaid callback service, mobile-money services, location-based content services, menu-based information services, and as part of configuring the phone on the network. Figure 6-5 Choose the SIM port to send the request to carrier for the services. 6.6 API Settings To send and receive SMS, it s supported connect to NeoGate TG using third party software via API, then he can send and receive SMS without login Web interface. 32/62

Figure 6-6 Enable API first, define the user name and password. You can set up the IP restrction for some special IP, the software can connect to NeoGate TG via tha IP only. We recommend configuring Permitted 'IP address/subnet mask' for security. 33/62

7 Gateway Click to access the gateway configuration page. We can configure the details of GSM/UTMTS/CDMA trunks,voip trunks and the call routing rules. 7.1 Mobile List 7.1.1 Mobile List All the GSM/UTMTS/CDMA modules will be listed here, edit each to the settings as you wish, and power off or reboot this module (Port) saperately. Figure 7-1 Click edit to configure the GSM/UTMTS/CDMA channels. 34/62

Figure 7-2 1) General Items Trunk name Mobile number CLIR RxGain TxGain Call Progress Tone Design the name of this trunk, it will display in mobile list and trunk status page. Input the mobile number here to take a note only. Calling Line Identification Restriction. If you want to hide your mobile number, you can enable it. It s disabled by default. Note: Please contact the SIM carrier to confirm if it s supported in advance. To adjust the received volume, please configure this one. No need to change it if the volume is fine. It s 60% by default. To adjust the transmit volume, please configure this one. No need to change it if the volume is fine. It s 40% by default When dialing from SIP to GSM/UTMTS/CDMA, during the trying period at SIM carrier side, it s completely sclient in SIP side. Enable this to get a virtual ring back tone. 2) Call Duration Settings In this page we can configure the duration of this channel, you can also enable the blance alarm when the time is beyond the value you have pre-configured. 35/62

Figure 7-3 Items Single Call Max Duration(min) Max. Call Duration(min) Clear Stat. Balance Alarm Settings Alarm threshold(min) Port Number Prompt E-mail Configure the duration of each call, it s 0 by default, which means no limit. Configure the max duration of this GSM/UTMTS/CDMA port, it s 0 by default, which means no limit. The date to clean the duration status each month. When Max. Call Duration(min) is configured a 0 (no limit), this feature is disabled. Cofigure the time duration when NeoGate TG will send the alarm message. The value must be less than Max Call Duration. Choose the port to dial the alarm call. The number to receive the alarm call. The prompt played during the alarm call,you can customize the prompts as your wish. The email address to receive the alarm email. Note: please make sure SMTP test is successful in Email settings page before configuring this. 3) Advanced settings. 36/62

Figure 7-4 Items IMEI IMSI SMS Center Carrier Band PIN Code International Mobile Equipment Identity of this module, it s not changeable. International Mobile Subscriber Identification of SIM card, it s not changeable. The SMS center of this SIM card, NeoGate will generate this by default. You can also input he number here for the carrier if it s not the default one. The carrier connected by default. You can also choose manual mode if this SIM card is supported by several carriers. The band of this SIM card, you can choose PGSM900, DCS1800, PCS1900, EGSM900/DCS1800, GSM850/PCS1900 The PIN code of this SIM card, if it s disabled by cellphone, just keep it blank here. Warning: Be careful. If you failed to enter your correct PIN code 3 times in succession, the SIM card will be blocked. 7.1.2 Module Group To route the call to a GSM/UTMTS/CDMA channels group, and dial out by the strategy we chose, NeoGate can route the call in advanced method depending on your needs. 37/62

Figure 7-5 You can create new mobile group or edit the default one. Figure 7-6 Items Group Name Strategy Group Members Degisn the group name of this mobile group Choose the strategy of how to use these GSM/UTMTS/CDMA channels. Default: The first channel will be used first always, when it s busy, NeoGate TG will choose the next one. Sequence: The whole channels will be used one by one. Balance: These channels will be balanced used. The channels selected to right side will be a member of this mobile group. 7.1.3 Call Waiting Call waiting is a feature supported by SIM carrier, when there is a second call dialing into this SIM card, there will be waiting tone instead of hang up or do 38/62

follow me. Figure 7-7 Choose the port to set up call waiting, NeoGate will contact the SIM carrier to define if call waiting is supported. If yes, a window will pop up allowing you to enable or disable call waiting. Figure 7-8 Notes: 1. It takes several seconds to contact SIM carrier to get the call waiting status. 2. When call waiting is enabled, follow me will not work. 7.1.4 Follow me Figure 7-9 Choose the available port to set up follow me, NeoGate will contact the SIM carrier to confirm if follow me is supported. If yes, a window will pop up allowing you to configure the details. 39/62

Figure 7-10 We can choose the transfer type,input the number you want to transfer the call, just make sure the number you input there is reachable. When a call arrivedt, the call will be transferred to that number. Notes: 1. It takes several seconds to contact SIM carrier to get the status of follow me feature. 2. The follow me feature needs the support of SIM carrier. 7.2 VoIP Settings To integrate with other IPPBX, we need to configure the VoIP settings in NeoGate TG to set up VoIP trunk (SIP and IAX). 7.2.1 VoIP trunk There are 3 types in VoIP trunk page. We can create VoIP account, VoIP trunk, service provider trunk here. Figure 7-11 40/62

1) VoIP account Figure 7-12 Items Trunk type Type Name Account Password Account mode will allow IP phone or IPPBX to register using this account to NeoGate Choose type of this account, SIP, IAX,orSIP/IAX Define the name for this account Define the number for this account Define the password for this account Figure 7-13 Items Enable SRTP Qualify Secure Real-time Transport Protocol, if it s enabled, the same setting should be enabled in IP phone side. Send check alive packets to IP phones, when it s disabled, NeoGate will ignore the reachbility and the 41/62

Transport DTMF Mode status of this account will be unmonitored. This will be the transport method used by the extension. The options are UDP (default) or TCP or TLS. RFC2833, Info, Inband, Auto. 2) VoIP Trunk In this mode, you can register NeoGate TG to provider via the trunk details with authorization details. Figure 7-14 Items Trunk Type Type Provider Name Hostname/IP Domain User Name Authorization Name Password Choose trunk mode to register to provider Choose the type of this trunk, SIP or IAX Input the name of provider Service provider s hostname or IP address, 5060 is the standard port number used by SIP protocol. Don t change this part if it is not required. VoIP provider s server domain name Username of SIP account Used for SIP authentication, it s the same as user name generally. Password of SIP account 42/62

Figure 7-15 Items From User Online Number Maximum Channels Caller ID All outgoing calls from this SIP Trunk will use the From User in From Header of the SIP Invite package. Keep this field blank if not needed. Define the online number for Skype Connect and some other SIP service providers. Leave this field blank if not needed. Control the maximum number of simultaneous calls, set as 0 to specify no limit. Specify the caller ID to use when making outbound calls 43/62

Enable SRTP Qualify Enable outbound proxy server Codec Transport DTMF Mode DOD settings over this trunk. Define if SRTP is enabled for this trunk, it depends on provider s configuration. Send check alive packets to the SIP provider. A proxy that receives requests from a client, even though it may not be the server resolved by the Request-URI. Define the codec for this SIP trunk and its priority This will be the transport method used by the SIP Trunk. This method is given by the SIP trunk provider. The options are UDP (default) or TCP or TLS. Set default mode for sending DTMF of this trunk. Default setting: rfc2833 DOD (Direct Outward Dialing) means the caller ID displayed when dialing out, before configure this, and please make sure the provider supports this feature. 3) Service provider This is service provider trunk (peer to peer mode), which uses IP address only. If you have got a trunk with only IP address, please choose this type. Figure 7-16 Items Trunk Type Type Provider Name Hostname/IP Choose trunk mode to register to provider Choose the type of this trunk, SIP or IAX Input the name of provider Service provider s hostname or IP address, 5060 is the standard port number used by SIP protocol. Don t change this part if it is not required. 44/62

Figure 7-17 Items Qualify Maximum Channels Codec Transport DTMF Mode DOD settings Send check alive packets to the SIP provider. Controls the maximum number of simultaneous calls, set as 0 to specify no limit Define the codec for this SIP trunk and its priority This will be the transport method used by the SIP Trunk. This method is given by the SIP trunk provider. The options are UDP (default) or TCP or TLS. Set default mode for sending DTMF of this trunk. Default setting: rfc2833 DOD (Direct Outward Dialing) means the caller ID displayed when dialing out, before configure this, and please make sure the provider supports this feature. 45/62

7.2.2 Trunk Group To route the call from GSM/UTMTS/CDMA trunk to VoIP trunk group, we can create trunk group in this page. Figure 7-18 Click Add New Trunk Group to add a new one, or edit the defaut one. All the VoIP trunk will be listed here, we can choose the desired trunks to the right side as a group. Figure 7-19 7.2.3 SIP Settings This is the SIP settings in NeoGate, including General settings, NAT, Codecs, Qos, Response code and Advanced settings. 1) General 46/62

Figure 7-20 Items UDP Port Port used for SIP registrations, Default is 5060 TCP Port Port used for SIP registrations, Default is 5060 TLS Port Port used for SIP registrations, Default is 5061 When using NeoGate TG as a TLS client, whether or TLS Verify Server not to verify server s certificate. It is No by default. TLS Verify Client When using NeoGate TG as a TLS server, whether or not to verify client s certificate. It is No by default. TLS Ignore Common Name Set this parameter as No, then common name must be the same with IP or domain name. When using NeoGate TG as TLS client, specify the TLS Client Method protocol for outbound TLS connections. You can select it as tlsv1, sslv2 or sslv3. RTP Port Start Beginning of RTP port range RTP Port End End of RTP port range DTMF Mode Set default mode for sending DTMF. Default setting: rfc2833 Max Maximum duration (in seconds) of a SIP Registration/Subscription registration. Default is 3600 seconds. Time Min Registration/Subscription Minimum duration (in seconds) of a SIP registration. Default is 60 seconds 47/62

Time Default Incoming/Outgoing Registration Time Register Attempts Register Timeout Calling Channel Codec Priority Video Support Max Bit Rate DNS SRV Look Up User Agent Default Incoming/Outgoing Registration Time: Default duration (in seconds) of incoming/outgoing registration. The number of SIP REGISTER messages to send to a SIP Registrar before giving up. Default is 0 (no limit) Number of seconds to wait for a response from a SIP Registrar before timed out. Default is 20 seconds. Once enabled, when dialing out via SIP/SPS trunks, the codec of calling channel will be selected in preference. If not, NeoGate TG will follow the priority in your SIP/SPS trunks. Support for SIP video or no. Default is yes. Configure the max bit rate for video stream. The default: 384kb/s Please enable this option when your SIP trunk contains more than one IP address. To change the user agent parameter of asterisk, the default is NeoGate TG, you can change it if needed. 2) NAT Note: Configuration of this section is required when using remote extensions generally. Figure 7-21 Items Enable STUN STUN Address STUN (Simple Traversal of UDP through NATs) is a protocol for assisting devices behind a NAT firewall or router with their packet routing. The STUN server allows clients to find out their public address, the type of NAT they are behind and the internet side port 48/62

External IP Address External Host External Refresh Interval NAT Mode Allow RTP Reinvite associated by the NAT with a particular local port. This information is used to set up UDP communication between the client and the VOIP provider and so establish a call. The IP address that will be associated with outbound SIP messages if the system is in a NAT environment. Alternatively you can specify an external host, and the system will perform DNS queries periodically. This setting is only required when your public IP address is not static. It is recommended that a static public IP address is used with this system. Please contact your ISP for more information. Used to identify the local network using a network number/subnet mask pair when the system is behind a NAT or firewall. Some examples of this are as follows: 192.168.0.0/255.255.0.0 : All RFC 1918 addresses are local networks; 10.0.0.0/255.0.0.0 : Also RFC1918; 172.16.0.0/12 :Another RFC1918 with CIDR notation; 169.254.0.0/255.255.0.0 : Zero conf local network. Please refer to RFC1918 for more information. Global NAT configuration for the system; the options for this setting are as follows: Yes = Use NAT. Ignore address information in the SIP/SDP headers and reply to the sender's IP address/port. No = Use NAT mode only according to RFC3581. Never = Never attempt NAT mode or RFC3581 support. Route = Use NAT but do not include rport in headers. By default, the system will route media steams from SIP endpoints through itself. Enabling this option causes the system to attempt to negotiate the endpoints to route packets to each other directly, bypassing the system. It is not always possible for the system to negotiate endpoint-to-endpoint media routing. 3) Codecs We can choose the allowed codec in NeoGate TG, a codec is a compression or decompression algorithm that used in the transmission of voice packets over a network or the Internet. More information about codec, you can refer to this page: http://en.wikipedia.org/wiki/list_of_codecs 49/62

Figure 7-22 If you want to use codec G729, we recommend buying a license key and input it here. 4) Qos QoS (Quality of Service) is a major issue in VoIP implementations. The issue is how to guarantee that packet traffic for a voice or other media connection will not be delayed or dropped due interference from other lower priority traffic. When the network capacity is insufficient, QoS could provide priority to users by setting the value. Figure 7-23 Note: It s recommended that you configure the QoS in your router or switch instead of NeoGate side. 5) Response Code NeoGate supports to change the code from GSM/UTMTS/CDMA provider to the one you wanted before sending it back to your IPPBX, it helps the IPPBX understand better the exact call status, like busy, no response and others. 50/62

Figure 7-24 Note: We don t recommend configuing this if you are not familiar to the code of call status from mobile carrier and your IPPBX. 6) Advanced Settings Figure 7-25 Items From Field To Field 180 Ringing Remote Party ID Allow Guest Pedantic Alwaysauthreject Where to get the caller ID in SIP packet Where to get the DID in SIP packet It is set when the telecom provider needs. Usually it is not needed Whether send Remote-Party-ID on SIP header. Default no. Whether allow anonymous registration extension. Default: no. It s recommended to be disabled for security. Enable pedantic parameter. Default: no. If enabled, when NeoGate TG rejects Register or Invite packets, NeoGate TG always respond the packets using SIP404 NOT FOUND. It s recommended to be enabled for security. 51/62

Session -timers Session-expires Session-minse Session-refresher Enable session-timer mode, default: yes. If you found the call is cut off every 15 minutes every time, please disable this. The max refresh interval The min refresh interval, which mustn't be shorter than 90s Choose session-refresher, the default is Uas 7.2.4 IAX Settings IAX is the Internal Asterisk Exchange protocol, you can connect to NeoGate TG or register IAX trunk to another IAX server. It s supported by the asterisk-based IPPBX. Figure 7-26 Items Bind Port Port used for IAX2 registrations. Default is 4569. Bandwidth Low/medium/high with this option you can control which codec to be used. Min Registration Time Minimum duration (in seconds) of an IAX2 registration. Default is 60 seconds Maximum duration (in seconds) of an IAX2 Max Registration Time registration. Default is 1200 seconds. Codecs Enable the codec you want for IAX communication. 7.2.5 General Preferences 52/62

Figure 7-27 Items Ring Timeout MAX Call Duration HTTP Bind Port Two Stage Dialing Prompt The global time out value for extensions, it s 30 by default. The global max call duration setting for all extensions, it s 6000 by default. Port used for HTTP sessions; Default: 80. If you change this, please reboot to take effect. Choose the customized two stage dialing prompt; it s disabled by default. 7.3 Routes Settings To route the call to the correction destination, we should configure this page well, including the mobile to IP and IP to mobile settings. 7.3.1 Mobile to IP This is the route page specifying how to route the calls from GSM/UTMTS/CDMA channel to IPPBX. There is a default route here, and we can create a new one or edit the old one. There are two modes for you to configure that. Figure 7-28 1) Simple Mode 53/62

Figure 7-29 This is the simple mode. What we need to do is just choose the incoming source trunk and the destination trunk you want to route the call to, NeoGate will allow all incoming calls and route it to the destination trunk without any modification. 54/62

2) Advanced route Figure 7-30 When simple mode is set as No, you can check the advanced settings. Items Route name A name for this route Call Source Choose the trunk where incoming call comes from Match the prefix of caller ID for incoming calls. Inbound caller pattern Hover the pointer over to read tips. Choose whether call back is enabled, you can Enable Callback configure the advanced call back settings in part: 7.3.4. Call Destination Choose the destination trunk to route the call to When it s configred, this number will be dial via Hotline destination trunk permanently Outbound calls that match this dial pattern will Outbound Dial Pattern use this outbound route. Hover the pointer over to read tips. Allow the user to specify the number of digits that Strip digits from front will be stripped from the front of the phone before dialing number before the call is placed. Prepend these digits before These digits will be prepended to the phone dialing number before the call is placed 55/62

7.3.2 IP to Mobile This is the route page specifying how to route the calls from VoIP trunk to GSM/UTMTS/CDMA channel. There is a default route here, and we can create a new one or edit the old one. There are two modes for you to configure that also. Figure 7-31 1) Simple Mode This is the simple mode. What we need to do is just choose the incoming source trunk and the destination trunk you want to route the call to, NeoGate will allow all incoming calls and route it to destination trunk without any modification. Figure 7-32 56/62

2) Advanced mode Figure 7-33 When simple mode is set as No, you can check the advanced settings. Items Route name A name for this route Call Source Choose the trunk where incoming call comes from Match the prefix of caller ID for incoming calls. Inbound caller pattern Hover the pointer over to read tips. Define the expected DID Number if this trunk passes DID on incoming calls. Leave this field blank DID number to match calls with any or no DID info. You can also use pattern matching to match a range of numbers. Define the extension for DID number. You can only input number and - in this field, and the format DID Associated Number can be xxx or xxx-xxx. The count of the number must be only one or equal the count of the DID number 57/62

Enable Callback Call Destination Hotline Two stage Dial Outbound Dial Pattern Strip digits from front before dialing Prepend these digits before dialing Choose whether call back is enabled, you can configure the advanced call back settings in part: 7.3.4. Choose the destination trunk to route the call to When it s configred, this number will be dial via destination trunk permanently Enable it to get the customized two stage dial tone before dial out, it s disabled by default. Outbound calls that match this dial pattern will use this outbound route. Hover the pointer over to read tips. Allows the user to specify the number of digits that will be stripped from the front of the phone number before the call is placed. These digits will be prepended to the phone number before the call is placed 7.3.3 Blacklist Blacklist is used to block an incoming/outgoing call. If the number of incoming/outgoing call is listed in the number blacklist, the caller will hear the following prompt: The number you have dialed is not in service. Please check the number and try again. The system will then disconnect the call. Figure 7-34 We can add a number with the type: inbound, outbound or both. 7.3.4 Callback Settings NeoGate TG allows caller A to dial an inbound route number, and after hearing the ring, A can hang up the call or wait for NeoGate TG to cut off the call, then 58/62

NeoGate TG will call A with this number. When A picks up the call, A can dial the number he wants to call; NeoGate TG will route this call to destination trunk. Notes: 1. If you d like to use callback feature, please make sure it s enabled on the Mobile to IP or IP to Mobile setting panel. 2. No callback rules needed to be set if the trunk supports call back with the caller ID directly. Figure 7-35 If you want to apply Callback function to all incoming numbers, please tick Allow All numbers. Follow the step to use this function. Step 1: Enable Callback. On the mobile to IP or IP to Mobile setting panel Choose Yes on Enable Callback to enable this function. Figure 7-36 Step 2: Create Callback number 59/62

Figure 7-37 Step 3: Create Callback Rules You will need to create callback rules when the system should strip or add digits. Figure 7-38 Items Trunk Name Strip digits from front Prepend before dialing Choose the trunk with callback rules Define how many digits will be stripped from the call in number before the callback is placed. Define digits added before a callback number before the callback is placed 60/62

8 Applications Application 1 Figure 8-1 Application 2 61/62

Figure 8-2 [Finish] 62/62